1Scope and purpose
This Privacy Policy explains the handling of personal information in connection with the Caravan & Co website, its product-discovery content, and communications with visitors. References to "Caravan & Co," "we," "us," and "our" concern the business operating under that name. References to "you" and "your" concern individuals interacting with the website or communicating with us.
Personal information means information relating to an identified or identifiable individual, together with any broader categories protected by applicable privacy law. Information does not cease to be personal merely because it identifies a browser or device instead of displaying a person's name.
This Policy addresses our processing activities. It does not replace the privacy notices of independent retailers, affiliate networks, or other services that process information for their own purposes. Our Terms of Use address use of the website, while commercial disclosures explain the nature of relevant affiliate relationships.
2Our affiliate business and retailer transactions
Caravan & Co is a product-discovery and affiliate referral platform. Its content concerns lifestyle products and related collections, including fragrance, watches and jewelry, fashion, beauty, technology, home, travel, and gifts. We do not sell the featured physical products, operate their checkout, collect payment for them, maintain inventory, or fulfill orders.
Where you follow a live retailer link and make a purchase, the retailer collects the information required for its transaction under its own privacy notice. This can include billing, delivery, payment, and order information. The absence of checkout on Caravan & Co does not mean that no referral information is transmitted or that no transaction-related reporting is received.
Demonstration listings and placeholder controls do not themselves establish an active affiliate-tracking arrangement. This Policy describes the relevant processing according to the interaction, feature, and service actually involved; it does not state that every category of processing applies to every visit.
3Information you provide directly
When you communicate with Caravan & Co, we receive the information contained in that communication. This includes your contact details, the subject and content of your message, and attachments or other information you choose to provide. Privacy requests and correspondence concerning content, partnerships, or technical problems also contain information used to address the matter raised.
Provide only information reasonably relevant to your inquiry. Do not send payment-card details, account passwords, government identifiers, medical records, or other sensitive material unless a specific, lawful process requires it. A retailer's order issue does not require you to disclose full payment credentials to Caravan & Co.
Information requested through a particular collection point is subject to the explanation given there. Where information is necessary to respond to a request or provide a requested feature, withholding it can prevent that response or feature from being provided.
4Technical information and website activity
Accessing a website involves processing technical information to deliver pages and related resources. Relevant information includes network addresses, requested resources, browser request information, and access times. Hosting, delivery, and security services also process technical information within the scope of their services and configuration.
Where website activity is recorded, the information concerns the pages and features used, referring sources, searches, product interactions, outbound clicks, or diagnostic events associated with the recording. The extent of recording depends on the tools and settings operating for the interaction concerned. Technical delivery, aggregated reporting, and individual-level behavioral tracking are distinct activities and are not treated as interchangeable.
A browsing session does not, by itself, give Caravan & Co access to unrelated files, passwords, or the contents of other applications on your device. We do not infer permission to collect such information merely from your visit.
5Affiliate referrals and conversion information
An affiliate link identifies a referral associated with Caravan & Co. Depending on the arrangement, following the link transmits information directly to a retailer or through an affiliate network or tracking service. Relevant fields can include a publisher identifier, product destination, campaign reference, click identifier, timestamp, and technical request information.
Where a network or retailer reports a qualifying transaction, the report can associate a referral with transaction status, value, an order reference, commission, or a cancellation or reversal. The reporting fields depend on the actual arrangement. An identifier or order reference is not described as anonymous solely because a visitor's name is absent.
Referral information supports attribution, commission reconciliation, reporting, and the investigation of invalid or fraudulent activity. A commission report does not necessarily contain the purchaser's payment-card details or delivery address. Equally, checkout occurring elsewhere does not establish that all reporting is anonymous or limited to aggregate totals.
The retailer or network can act on its own behalf for some processing and provide services on another party's behalf for other processing. Its privacy notice and the actual activity determine the relevant responsibilities. Our affiliate disclosure concerns commercial compensation; this Policy concerns information processing.
6Cookies and similar technologies
Cookies, browser storage, scripts, pixels, and identifiers within links are methods used across websites to support functionality or measure activity. Where these technologies operate in connection with Caravan & Co or a referral, their purpose and applicable legal conditions determine the relevant notices and choices.
Functional purposes differ from analytics, affiliate measurement, and advertising purposes. A technology is not classified as necessary solely because it benefits our business, and the absence of a conventional cookie does not establish the absence of tracking. Browser storage and identifiers transmitted through links can also be relevant.
Where consent is required, the relevant storage, access, or processing is subject to valid consent before it occurs, unless a lawful exception applies. Simply browsing the website or accepting general terms is not treated as consent to activities requiring a separate choice. Detailed technology information and preference controls, where applicable, supplement this Policy.
7Saved items and preferences
Where a feature remembers a saved product or preference, its operation can involve information retained in the browser, information transmitted to a service, or both. Local browser storage is different from account-based synchronization or storage in a server-side database. The presence of a save control does not itself establish a registered account or cross-device profile.
Clearing browser storage can remove locally retained selections and preferences. Disabling storage can affect the functionality that relies on it. Removing information from your browser does not automatically delete information already held independently by a retailer, network, or service provider.
8Purposes for processing
We process information in connection with delivering the website, responding to communications, administering requests, maintaining reliability, and protecting the service against misuse. Where affiliate referrals operate, relevant information also supports attribution, reconciliation, and associated business records.
Where measurement tools operate, their information supports understanding use of content and improving the relevant experience, subject to applicable conditions and choices. Recording information for one purpose does not create unrestricted permission to use it for unrelated purposes.
Marketing communications, personalized advertising, account functionality, and additional services are subject to their own actual collection and use arrangements. This Policy does not establish those features or enroll a visitor in marketing merely because they browse or submit an unrelated inquiry.
9Grounds for processing
Where applicable law requires a lawful basis, the basis depends on the specific purpose and circumstances. Responding to a request can involve steps requested by you; maintaining security and handling ordinary business correspondence can involve legitimate interests where legally available and appropriately balanced. Legal obligations provide a basis where processing is required by law.
Consent applies where the relevant activity requires consent, including applicable storage, tracking, or marketing activities. Reliance on legitimate interests does not override a separate requirement to obtain consent. Where consent is the basis, withdrawal affects future processing without retrospectively invalidating processing lawfully undertaken before withdrawal.
Information is not treated as necessary for a contract merely because a processing activity is mentioned in this Policy. Any collection-point or supplementary notice identifies additional information relevant to the particular processing described there.
10Disclosure and service providers
Information is disclosed where needed for the purposes described and subject to applicable legal conditions. Relevant recipients include the hosting and technical providers involved in delivering the service, communications providers handling correspondence, and affiliate networks or retailers participating in the referral concerned.
Advisers, public authorities, or other recipients receive information where necessary and lawful for professional advice, compliance, legal proceedings, protection against unlawful activity, or the establishment or defense of rights. Such disclosures are assessed in context rather than treated as an unlimited permission to disclose information.
A provider acting on our behalf is subject to the applicable service and data-protection arrangements. An independent organization processing for its own purposes is responsible for those purposes under applicable law. A reference to an external policy does not remove our responsibilities for our own collection, selection of recipients, or disclosures.
11External retailers and other resources
When you leave Caravan & Co, the destination can collect technical information and information you submit directly. Retailer checkout, payment, shipping, account registration, and after-sales communications are governed by that destination's practices and applicable law. Review its notice before providing information.
Externally delivered resources, where present, can also involve technical requests to their providers while a page is displayed, without a separate purchase or account registration. The relevant integration and provider determine the information involved. A retailer's responsibilities for its transaction do not make it responsible for unrelated processing carried out by Caravan & Co.
12Retention and disposal
Information is retained according to the purpose for which it is held, applicable legal obligations, and the need to resolve requests, reconcile records, or establish or defend legal claims. Retention is assessed by category rather than by an unrestricted commitment to keep all information indefinitely.
Correspondence is retained for the handling and reasonable follow-up of the matter concerned. Technical records serve operational and security purposes. Affiliate records support reconciliation and applicable accounting or legal requirements. Consent and request records support the administration and demonstration of relevant choices and obligations.
A browser technology's expiry is distinct from retention of information previously received through it. Where information is no longer necessary and no lawful reason for retention remains, disposal or appropriate de-identification applies. A valid legal hold or other legal obligation can justify retaining relevant information for longer than an ordinary operational period.
13International processing
Hosting, communications, retailers, and affiliate services can involve processing in more than one country. A visitor's location does not establish that every recipient or server is located in the same jurisdiction.
Where a transfer is restricted by applicable law, the relevant legal conditions and safeguards apply. The appropriate mechanism depends on the parties, locations, and processing involved; this Policy does not claim that a particular certification, adequacy decision, or contractual mechanism covers every transfer. Any applicable transfer-specific notice supplements this explanation.
14Information security
Security is addressed through measures appropriate to the nature of the information, processing, and associated risks. Access, handling, retention, and service-provider arrangements form part of the relevant protection of information. No statement in this Policy guarantees absolute security or represents that every system is immune from unauthorized access or technical failure.
You should avoid transmitting unnecessary sensitive information and review the security and privacy information of a retailer before providing payment details there. Where a personal information incident triggers legal notification or other duties, the applicable requirements govern the response.
15Privacy choices and browser controls
You can control information you voluntarily submit and use applicable browser settings to manage cookies or stored site data. Where a site or provider offers privacy preferences, the controls apply within their stated scope. A preference can be browser-specific or device-specific rather than automatically applying everywhere.
Withdrawing consent, clearing storage, objecting to processing, and requesting deletion are different actions. Clearing cookies does not automatically withdraw every consent held in another system, and a processing objection does not itself erase all records. The effect depends on the request and applicable law.
A browser's Do Not Track setting and legally recognized opt-out preference signals are not interchangeable. Where a law requires a recognized signal to be honored for covered processing, that obligation applies. This Policy does not represent that an unverified preference mechanism or browser integration is implemented.
16Individual rights and requests
Depending on applicable law and the processing concerned, you can have rights to obtain information or access, correct inaccuracies, request deletion, receive information in a portable form, restrict processing, or object to particular uses. You can also have rights to withdraw consent, opt out of specified disclosures or advertising, and complain to a competent authority.
Requests are subject to the conditions, time limits, and exceptions established by law. Reasonable verification can be necessary before information is disclosed or changed. Verification should be proportionate and does not justify collecting unrelated identity information. An authorized representative can act where applicable requirements are met.
Deletion is not absolute where retention is legally required or an exception applies. If a request cannot be fulfilled in whole or part, the applicable explanation and review or appeal rights apply. Exercising a protected right does not justify unlawful discrimination. Requests concerning a retailer's independently held order information should be addressed to that retailer.
17Regional privacy protections
Additional rights and disclosures apply where the relevant jurisdiction's law covers Caravan & Co and the activity concerned. Under certain laws, disclosure for targeted advertising or other purposes can constitute a sale or sharing even without a monetary payment for the information.
Affiliate compensation alone does not resolve that classification. The actual information exchanged, recipient purposes, contractual restrictions, and applicable law determine the position. This Policy therefore does not make an unverified representation that every transfer is exempt from sale, sharing, or advertising rules.
Where required, jurisdiction-specific notices identify covered categories and activities, the applicable reporting period, and the available request or opt-out methods. General language in this Policy does not replace a specific notice or operational control required by law.
18Children and sensitive information
Caravan & Co's lifestyle discovery service is presented for a general audience rather than as a service designed specifically for young children. A child's interaction does not remove any protections arising under applicable law. Where information involving a child gives rise to special obligations, the relevant legal conditions govern collection, use, retention, and any required parental involvement.
The purchase of a beauty, fragrance, or other lifestyle product does not justify an assumption about an individual's health or other sensitive characteristics. Visitors should not include unnecessary sensitive information in ordinary inquiries. Special-category information, precise location, and other legally sensitive information are subject to the additional conditions applicable to their processing.
19Profiling and automated decisions
Ordinary product organization or a general editorial recommendation is distinct from constructing an individual profile or making a decision with legal or similarly significant effects. The existence of a recommendation on a page does not itself establish that an individual-level profile is created.
Where profiling or a covered automated decision occurs, the applicable notice, lawful basis, choices, and safeguards apply to that activity. This Policy does not claim that personalized recommendations or consequential automated decisions operate merely because similar features exist on other shopping platforms.
20Changes and continuing transparency
This Policy is revised to reflect relevant changes in processing, services, and legal requirements. The revision date identifies the version presented. Material changes are communicated where required, and additional notice or consent is obtained where the law requires it before a new use begins.
Publication of a revised notice does not retrospectively establish consent or override an existing privacy choice. Any mandatory right, protection, or obligation prevails over inconsistent general wording. Privacy information applicable at the point of collection and relevant supplementary notices form part of the explanation of the processing concerned.